$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38.cer File: a856eb04-e27d-4da2-8c39-a38263828e38.cer (raw, json) Hash identifier: Z8/ZGsGik7qbdy5g3tzcUR1oxNQ7smawHA/ZBCvl82g= Subject key identifier: 7A:DD:97:21:BB:C0:9A:10:69:15:FB:59:5D:D0:69:D7:A9:9A:79:A0 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D3432820910F666DE5B0B1DC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 18 Mar 2026 00:45:22 +0000 Certificate not after: Tue 20 Jun 2028 00:45:22 +0000 Subordinate resources: IP: 199.71.141.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:32:82:09:10:f6:66:de:5b:0b:1d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 18 00:45:22 2026 GMT Not After : Jun 20 00:45:22 2028 GMT Subject: CN=a856eb04-e27d-4da2-8c39-a38263828e38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ff:49:74:6e:b3:2d:3b:14:1d:9f:00:70:69: 7a:10:53:07:33:e5:79:1b:4c:60:e5:83:dd:c9:11: cf:e2:f0:e4:3f:15:1e:24:1e:09:8a:b4:5d:e3:4a: ed:33:80:c5:7b:9f:bd:d6:36:77:fb:14:c9:21:30: 47:ba:e3:ef:f2:2b:44:fe:bd:79:b6:74:db:39:3b: b1:21:7b:21:33:e0:6d:e8:21:bc:1f:82:e9:0a:7d: 3e:1f:b3:8d:05:b3:69:c9:e1:48:e2:77:d6:3f:64: 98:7b:f4:0c:35:c7:42:02:6d:bc:dd:92:bf:74:08: 61:da:dc:ac:b5:dd:7a:c3:07:33:10:a9:af:17:9a: 5b:16:4e:5b:75:1b:ac:c9:a4:2a:ff:0b:b8:fa:a6: b8:14:33:eb:43:c1:aa:1c:59:e3:db:d6:b3:79:f6: 21:70:1c:8f:c8:8b:3f:45:11:ff:12:3d:00:98:6b: 96:dd:69:2c:8b:a2:84:23:32:bf:ad:b4:1b:5e:8d: d1:95:09:44:08:95:6f:62:22:2c:fa:80:a3:88:cf: b5:92:cf:a3:70:2b:10:ed:14:aa:e4:6b:19:ac:c4: 44:a3:f0:2e:4d:1e:4c:45:43:ed:ab:fb:1e:67:15: 10:8c:55:e7:08:cd:93:07:c6:e5:6c:66:a5:b9:d9: 96:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:DD:97:21:BB:C0:9A:10:69:15:FB:59:5D:D0:69:D7:A9:9A:79:A0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 199.71.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:83:0e:43:60:a2:4e:78:2b:bc:7c:47:93:d1:f0:d4:86:d3: 29:19:e1:2a:22:82:25:88:a1:56:86:69:c4:be:d6:f7:84:e0: f5:8b:1f:62:f2:02:3b:8a:54:f0:5d:45:b3:ba:6c:bc:38:64: a8:cf:40:c8:17:c8:77:d8:fd:0f:65:bd:e1:d5:fc:f2:50:d6: 1a:66:6a:86:f4:9e:63:75:05:06:32:b1:4e:41:e3:d0:16:23: 4b:0d:1b:6a:c2:00:16:0b:c9:b2:8c:7a:d9:15:5d:13:43:47: 90:f6:65:67:7c:bd:cc:4d:c4:1b:89:10:5f:82:c0:98:9d:2e: e8:74:38:73:37:9e:e3:4c:8c:82:ef:fd:50:09:09:7e:e8:d8: dd:85:0a:f6:21:2b:18:93:8e:2a:47:aa:05:b6:00:11:8c:1e: 69:61:af:58:7a:42:75:cf:0b:38:93:c7:47:a8:6c:c7:4d:ef: bc:89:7c:f0:57:00:1a:7f:01:80:46:7f:c3:f4:cc:f0:58:3d: 6b:3b:f3:66:0a:77:01:e9:fc:fc:87:b7:5a:6e:7b:ef:52:e8: 25:a9:4c:e1:e7:ab:0d:36:5d:4c:7b:7b:e0:93:11:df:18:79: c3:3d:a0:99:84:71:99:f3:3b:3f:18:39:14:61:54:c0:29:e9: fd:ae:66:8f -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE00MoIJEPZm3lsLHcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMxODAwNDUyMloXDTI4MDYyMDAwNDUyMlowLzEtMCsGA1UEAxMk YTg1NmViMDQtZTI3ZC00ZGEyLThjMzktYTM4MjYzODI4ZTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkf9JdG6zLTsUHZ8AcGl6EFMHM+V5G0xg5YPd yRHP4vDkPxUeJB4JirRd40rtM4DFe5+91jZ3+xTJITBHuuPv8itE/r15tnTbOTux IXshM+Bt6CG8H4LpCn0+H7ONBbNpyeFI4nfWP2SYe/QMNcdCAm283ZK/dAhh2tys td16wwczEKmvF5pbFk5bdRusyaQq/wu4+qa4FDPrQ8GqHFnj29azefYhcByPyIs/ RRH/Ej0AmGuW3Wksi6KEIzK/rbQbXo3RlQlECJVvYiIs+oCjiM+1ks+jcCsQ7RSq 5GsZrMREo/AuTR5MRUPtq/seZxUQjFXnCM2TB8blbGaludmWsQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFHrdlyG7wJoQaRX7WV3QadepmnmgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9h ODU2ZWIwNC1lMjdkLTRkYTItOGMzOS1hMzgyNjM4MjhlMzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2E4NTZlYjA0LWUyN2QtNGRhMi04 YzM5LWEzODI2MzgyOGUzOC9hODU2ZWIwNC1lMjdkLTRkYTItOGMzOS1hMzgyNjM4 MjhlMzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADHR40wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAoIMOQ2CiTngrvHxHk9Hw 1IbTKRnhKiKCJYihVoZpxL7W94Tg9YsfYvICO4pU8F1Fs7psvDhkqM9AyBfId9j9 D2W94dX88lDWGmZqhvSeY3UFBjKxTkHj0BYjSw0basIAFgvJsox62RVdE0NHkPZl Z3y9zE3EG4kQX4LAmJ0u6HQ4czee40yMgu/9UAkJfujY3YUK9iErGJOOKkeqBbYA EYweaWGvWHpCdc8LOJPHR6hsx03vvIl88FcAGn8BgEZ/w/TM8Fg9azvzZgp3Aen8 /Ie3Wm5771LoJalM4eerDTZdTHt74JMR3xh5wz2gmYRxmfM7Pxg5FGFUwCnp/a5m jw== -----END CERTIFICATE-----Generated at Thu Mar 26 04:55:20 2026 by rpki-client